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(57)Abstract: 

PROBLEM TO BE SOLVED: To achieve high level security at the 
time of authenticating a terminal connected from a home 
communication network to the Internet by dial-up, and an IP 
address is assigned according to the connection. 
SOLUTION: An IP sec tunnel Is set In a communication path in the 
Internet communication network so that the secured communication 
can be performed through the IPsec tunnel between a home 
communication network and an authentication server 
communication network. Moreover, authentication strength can be 
enhanced by the two stages of the IP level authentication of the 
IPsec tunnel establishment and the personal Identification of an 
information server access, and a consumer can be specified from 
the IP address according to the linkage of an authentication server 
GW, an IP level authentication server, and a personal identification 
server. The consumer information can be acquired from the access 
IP address by an Information server. 
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(54) ^-y h't'iiaJ*)^:^^ 

(57) [mm] 

~^vv\zikm.-^n. biggie J; 0 i p 7 h* V'X7!>«7-y--f 
m^^wc] -i y^'-^y hmmm^Hcomm^iz i p 

sec h>^^;i/<£ffiSb. ^l*gjl««Ht^gE1t-Ajl« 
iN8i:C5M»C 1 P s e c h>^MZJ:^±^:3.7Umm'S: 

■pjigt-r-s. ^ e) »c. I p s e c h >^)imiL<D i p 
o> igBE?iis«rS5«?), igfiE-y--A-Gw. I pu^)imm. 

tJ— /"C. •BAIgliE-y— MoaSlt-iO, IPTHl'X*^ 





( 2 ) 



1 

::/Dhrj;l/ (I p. internet protocol) \zM^'t^7 
^rtGW (Gate Way) i, 

liE-y— /"^ilffiK (CSN. Certified Server Network) 10 
iE-y— AGW (Gateway) t^rlSAfc-f >^'— hfj" 

Eit— /tGW^:<DraiC. I P s e c (internet protoco 

1 security) h >^;l/<£^!e-r^^gSrfiSAfcC 

1^*3^2] IfFflH I P s e c h>^;U«OS I (open 
system interconnection)^ 3 ®JC^:t;§?tlfcB&#^ta 

— h I P7 H U'T.S'T'— Jl'bT*3< NAT (network ad 
dress translator) ^g^:. ItliH h >4--Jl'*^l9:^^nfc 

Lfc7&i-3Tf9fBl P s e c h >^;i/«:^MxTSsfiS;rf.^ 

<a A^liE-y— J: K 'f >^ CDff a Srff ^ D 
NS (domain name system) -y-— A€:i!>fj:< tfe— -t^t* 

CD:i-if W^«r«fFfBD N S it- A'lC^ I ^Sr^S<£rffi 
(I D) > |gEcD*^iaiS, i5J:Z^-y--t:7. • ;<J7^r]'iJ 

tc, itfiED N s -y— A L T-?-o$ffi* icf ij 0 s e) n;t 

t(lfE:/7-f'^-h I P7h*U7.$=^^-tLTPgv»-&*3-& 
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tftiSD N S ii— Att. SfeS^IC bfc A« o TMSf S« 
^SrgiJi^-r-5¥eS:-&tJlS*«6fB«©'f >:?-^5' h 

lE-y— njc « ;i (75 F.g V tc*f b T^iE*c^ S:^r^§-r 

Wi2<aA^liE-y--A*lc«,^liE4>tcfe 
Si|^T$i3:-5¥®S:<»;^/i:IS«3a9l5«©-f >^-^y 

21 iiriE^ii-y— A-GW(ctt, —zxomF. 

*^?)HTTP (hypertext transfer protocoDJCiST 
S t ^ tc«^ wiS**^IISr{ST;fe*oigII'^- i^tr^ 

[0 0 0 1] 

tt. IP (internet protocol) iCi^ilffCD-fe^iU 
T"^ (IPsec, internet protocol security) <&?fi5 

FbIOT H U;^^^ (NAT. network address translat 
ion) lcHt"-5>. 
[0 0 0 2] 

[tie5|5®S^R] -r>5'-^-y h«0lFSICj;«3, 'i>i'- 



# 

3 

10 0 0 3] :L<Df^lt\Z, ^>^-:^yhii^Zfl SP 
(internet service provider)^i@&Eb L-Jt^J^tW^'tJ" 

SL (secure sockets layer)*<^e.nTl^-&. S S Hi 

m^mmit^m (i so> t3£«e>e>nfcos i (open sy 

stem inlerconnectjon)^5®lC*fc*:/P h3Jl/Tfe 
^. 
[0 0 0 4] 

[0 0 0 5] ■5-CDJ;3;^7 Kl^XfC-r)tiT«, -^-WT H 

mm^^ y^-^y vt:-ff\>xvim.-^-n\z7i;-\2.7.t 

[0 0 0 61 :i©J;5JiWSf-ff t)nfct)© 

T$>oT> ^p^m.mm*^<^y^7 }\'7 y':fiAmz^K>-( 

^BM\t, C<D^otj.-t^:i.^J^^'S:^itt^iit^\Z, 

:fj^^mmr^:it\z^K>, -m^m^nx\t. mm-*)- 

(^) -5 S S ©(Single Sign On)-tJ- 

srSMtr^. ^^mit. mA^mm.<Dm'^izmAmm 
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i:S:Bfi«)i:-r-2>. 
[0 0 0 7] 

[^S^^Sl-r-Sfc^O^e] ;S^'f7>il'7-y 
r^JciD'f >^'— h • (I p. internet 

protocol) {C2p8a-r*7H^7.*<#4-^n. 

h • hziMzm-:i<mmt:fTO'i y^-^y hmm 

mt<Di^m.^izmn<bnrz^f^iGyf (Gate way) t, « 
•9-— Ajl^iW (CSN, Certified Server Network) t 

m^y^-^y vmmmi:o:>^m.M.\zm\-i^ntLmm 

if— AGW (Gate Way) ii^BA.1t^ y^—^y V'¥Wk 

IB^|*gGWt^iEEltiEt}— yN*GWt©P^(C. IPsec 
(internet protocol security) Vy^JV^Wc^'t^^ 

[0 0 0 8] f5SB 1 P s e c h >:*^;i'«0 S I (open s 
20 ystem interconnection)^ 3 )UC^^Sn;tBt^{tjlW 

Sims® U'<;uTCDBt#{ta«:*SC«:fiJffl-r« c: t «c 

J:0. I P±«7:/'J'5r-->3 >T*ntf^T®'y-— If 
[0 0 0 9] Sfc. VPN(Virtual Private Network : 

'(SLwmm \t.^£\z±m<r)m,^js[mm\zm\>^fon^ifi^ 
^}^mmmt.mm.-^-f^mmmii<^m\z i p s e c h> 
it^)v^mm-t^z.ii\z^K). mt^-nmmmnco-^- 
A't^#^#tgc®^rta««irt©ia*t© I p-vPN 

30 {Cj:*-fe^rL73ifflm«:Plffifr«). 

[0010]$e)lC, IPsech y^-}Vn.iL(0 I P U 

;^««*irtgfr-s« fj^t^^-^. KSEtf-zN'ow. I p 

T#;ti P7HUx*^e.rL-ifi»«S:5{»-rs::<l:**T 

[0 0 11] rnct)-S. 2|s5£BJ«. ^^^ttt^it-ZNTel 

H(end to end)jl^tc*5ltS^5|ctf»ffi-9— At©M© 

ilfl^ff •5^^*057 KU'XfiJSfe^iB, I P l/'^^l'^iE.i: 
®AS^IiE75^®SlbfcBgfiE^^^i> ggBE-t)— A'GWONAT 
tS«gT©{@ A^,iE«JSO«aS$l5. t»ffi-9--/\**i7 -fe 

7.Uita— iffii^<Dii#a$i5. is-ibrnz^mzmm.-^- 

A^7 i7 -tr X AioJtgT * ^ *^ ,i: ©^<iE4^^©^*a 

fflX-^-SS SO-y-— h'7.S:7yj':r-->3 >ya 
lCtt#-ti:-r. I PH'-VU'^Jl'TlliR-r*. 
50 [0 0 12] itrfESIE-it— y-^GWtt. ^1k<D-f'y-i^— 
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h I Kl^Xi&y— ;PbT*5< NAT (network addr 
ess translator) I P s e c 

h I PTHU'>^«:jim«-Kt3^*tF!a«rtjlffiJit'M1"-5 

-rs^Si:. laissiE-y— A'35^f>5ij*-r«. 

Ltziii-DXiiSUl P s e c h >^;l'Sr:^M^T^Jt>t"-&^ 

[0 0 13] «rl2gSEiJ— A'ilffiiPOtf ilAiglES: 
ff 5fflA|g|I-y— >^iCDffaSrff -pDN 
S (domain name system) D'—J'^^^PtJiKth—'O-f^ 

[0 0 14] KfiBa&rs^&tctt, n.— tfiag'JT- (I 

[0 0 15] |^Ila^IiEt^— A'iimiSa (CSN) rtJCfeS 

[0 0 16] f5fS<lAKiE-tJ— Att, ItffED N S it- 

[0 0 17] tfriE^*ic«, SfrlHPA^^IiEiJ— A*7l^?>w 
[0 0 18] |irE«a5NJCtt«afa<BAKIiE1J— AlC*fUT 

[0 0 19] IfrSE^lASlEii— njctt, ^SE't'fcfeSiS 

[0 0 2 0] Sfr|E<iAKSE-y— mMfpizib^i^ 
[0 0 2 1] ffillElgiiE-t}--AGWfCtt, — 0©^5S*^e> 

H T T p ic 7 -t t # ic-?-©}g*©e A 
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[0 0 2 2] 

[0 0 2 3] :^^m\i. mWZ^-rJiOiZ. iS^-(7)l7 
vZf\Zi:.Ki^>i'-^y V ' Zfu h^Mz^mrt^T V 

h • zfn hr3;HwS-:?<jl<I*ff ^-i" >^-*-;/ 
hjl«iW2 0 t©«liet,^{cUtt&tlfc^rtGW2 t> « 
ScCDSfE-y— /1*'&*-1'>5'— -^y H • h3;HCip 

sar^-T'^-f-^— h I P7 Hi/7.tcios>w^n^^aE 
•y— 1 0 t-T >9-^v hji««H2 0 ti(om^ 

20 [0 0 2 4] ddT, *%BJC7)!|$at-r^td;5«, 'f 
h3l««B 2 0 ®t|'{C^F*3GW2 t^SE-y— A' 
GWlt©W«C, I P s e c h>^;i'4 OSrffiJtrst 

^(omwL^&:v\z3m'r^. 

[0 0 2 5] ^SE-y-— A*GW1«. ^ScO:7'^-f h 
I P7F^7>*:/-;i'bT:fe<NATtSI*g5S:ffir^. I 

P s e c h>^~;i^4 0 7i<K:^$n;tt#tC^cDNATtS 

tg5ic:/-jubT:$.^:7'7-f'<-h 1 P7H^;^S:a« 
»cH*3S^F*g®««i3 Olt»-r4^*3»cSI01BO. «8 
30 * 3 *^ e>$iJ3l5-r «>aimA^ y h S;-?-® jl«/"^'ir y l-rtCD 
^T$t7 F U-T^lCbfcTStoTMlJi-r^^iE-y— Ailflifi 

1 o}H(o%-*)—n\z)v—'r^ >ifL. mm-^—^^Mmm 

)\>Ty hrt©3BT5fe7 H.l':^{'bfcd^oT I P s e c h 
>:!^;W4 0 &:^t-bT*ffe-rS^*«c;i'-5^^ >y-r^. 
[0 0 2 6] ^E-y-— -''^ilWiffl 1 0©«fl::. ^HA^BES: 
ff -5® A^IiE-y-— A 6 *J H Jt-f >*W®a€:ff D 
N S (domain name system) -y-— A'7 <&^!>;'i< tt>— O 
-f {@ AlgiE-y-— /N* 6 «® AigiE^rllfT bfcSS* 

40 ©:i— y-'iS^S:DNS+>— A? JC?l#jKb, DNS-y-— 

ifas'j^ (ID) , mm.<o-^wmsL^ ' 

[0 0 2 7] I ^V^)\/m&.\Z^^'SM*&.imM.^n^ 
t, 1 P s e c h>^Jl/4 0&?63tb. -tC^IBA^aE 
•y— /N'B tCJ; OfllA^IiEi&fT^. ® A^lE-y— /N* 6 «N 
ATtttg5t::J:0#J0Se.n;ty5'f-^-h I PTKl^ 
7.T'3b-57i?-lrX7C (56) 1 P7h*^7.S:=^-(CigiE1^■ 
-;tG W 1 ici p u^;uKiiE©rL— y'?&ravi'&*3-a-«>. 

50 llAKII-y— A6«, 
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7.7C I P7H^:^^=^^-<i:LTh-;*<>lc:i— If 
ID. WJ(lWfB^®:x— lfi»^$:iiffltDNSCDa@S: 

[0 0 2 8] <i AKiE-y-— -'^ 6 DNS-y--A7IC, 

[0 0 2 9] ^* 3 iz\t. OA^fiE-lt-A 6 ^.O^iE 

[0 0 3 0] ^5K3«®AKIiE-y--n6ti?*bTMaE« 

[0 0 3 1] PA^IiEiJ— /N*6IC«, KiEit'tc^.-S^* 
3 JC -P ViTltfiE^.iE4^^ ® t'^-^^a-a-*** ^ «t ^ « 

•5. 

[0 0 3 2] e A^.IE-ti— A 6 ^Htt'l'S.-S^* 3 

[0 0 3 31 KSE-t^-— ''N*GW1 — ::3®affi7S 3*^e)H 
TT PtC±^Ti7-fe>?.*ifcofc<f:#{C-?-«>Sg* 3 CD[@A 

[0 0 3 4] g] ItC^f h'7-i'«fi£0iJ^#S8bT 

>7,^ismizm^^-r^t, si8*3fc:/7'f'^-M P7 

KkX^&^-^-r^. i^*3Ji^'-1'-^;l/T-:/:/?iJ^T-f > 
hSfe(iI SP (internet service provider) 
S-iS* LT|g|iE-9-— >''?GW 1 'Ng^i^S:il*-r'5. I P V 

n-5>t^l^GW2 t^SE-tt— A'GWl tOfflX- 1 P s e 
c h >^;i'4 0 *?S5t-r-5. ^tiE+»--A'GW 1 Ji-f >^ 
h * fc« 1 S P UT^iK-rSSffi* 3 *KiE 

«r*-r-i.o NATm«g5Tfieffl-r^NATX>hUT— 
y;Kci3lriT^*3©<HAi8SEtt®$:'ffilTS. 
«iP 3 0 , ^fjEit-A*jl««H 1 0 h I P 
7HU'XICj;0ji^*ffl'V ^*3*»e>©^SEt>— Ail 
0'^7i7-t7.di%^-r^<t7'^'f'<- h I PT K 
UXS:ffl*3iCfiJ0^T-S). I P l''^;PKIiE$:fi'ofc 

<iA^a-y— -'■^ettiL— tfroiHASifii&fT^. ©a 
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7.is^^ 1 PL''<;HgIiEi&fT-p;t«f'3GW2(O^Sim^$ 
SIiE-t>-— AGW 1 1 P V^)VWM.t.mKmM. 

<JDH#®]ES<t*5^xyi'r«». 1 PU"<JU^SE. ilA 
SfiESrfTP t I P U'^^l'SitiEi^— A9 tOA^iE-y— A 

6 L D N S tJ— A 7 (C 7 5^ ir ;^ L. fcOL— tf it^S: 

ggib. t»^1}— AS^DNS+J— y'<7 JC^ti-^to-a-Sr 
frti. 3.-- !f1t«*U^-r-5. ©AggE-y— y'^SfifflA 
^II<Dttffi*i®5|5 3'^iia]b, 3 fi® A^SE-y— A 

6'vKiE^^^®^>'^'&*P-&*?f -So ^liE-y— AGWl 
10 «, fflA^H^rff ■3TVi;^tViS-&lC«, HAigfE-y— 

6 tC® AKiE^&ffi-r. 

[0 0 3 51 WT. *%?3^M«9J*$e.lCp«aJClttHJt- 
^ 1 Sr#HgbT. *lliS^aJ«^l^ji«i^ 3 OfgcD^ 

* 3 . ^1*3 G w 2 . ^sE-y--/mmiW 1 0 i^ossE-y— 
AG w 1 , IP U'^ji'KSE-y— A 9 , mKmsf&-n 

6. DNS-y— A7, iS^-y--A8«:-&tr, 
[0 0 3 6] aL-iftt^*3*igf^UT^I^GW2<£:n- 

P (internet service provider)?&igft UT^SE-y-— A 

20 ji«ita 1 0 ic^igg-r^. msE-y— A-Gw i ^^gw 

2<i:©WTI P s e c h>^>il'4 0 Sr?6StT-5. KIIE-y- 
-AGWlttNATaffi5*^b, 3 «rK:SE-y- 

I PT Kux^!/— jut"^. I p ^^;u^ii-y--A9 

«, ^M-y— >'^GW 1 *^e.OKfiES*ICj* L^* 3 i I 
P s e c h>^JW4 0©?63t*ff 5fc*«>KSiE«rff-5. 

® A^iE-y— >'t 6 IP u^;pgiiiE^fi^-D fc^^— y 

fflAS:^fEt"'i>. DNS-y-— A7tt. ^— y-'1t^«r«J$ 

-r-5. y-'tsffi«, I p u^;uK;iiE-y— A 9 tffiA^ 

30 E-y— -?t6*tMSIUSIiE*ff -5ta®L, KiE#ifl7-r 

ttffi-y— A 8 «^.E-y— Aji^ifg 1 o»c 

J*i^L;fc:x— tfcD*g*3Jct*ffi*JS#t-r^, It^-y— A 
8 tt7 i^rfe;^©^^ fcSffi* 3 ICN ATtStg 5 »C J: 0 SJ 0 

tienfe:/7'f h I P7 H^;^*DNs-y-— A7IC 

[0 0 3 7] ;^«Cl::. El/<tliLE5€:#MbT2)s:||J6fiJ 

cDttf^icoviTi^iliirittwr*. @ 2 GW2 tm. 
E-y-— AGWl i-<73MJC?65tSnfc I P s e c h>^^;i' 

40 n-5A^r-7 hC07 FU'7.#-%^4«ja2:^T0-C«)-5). 04 

ttfiASE-y— A. DNS-y— A. M^-y— 

[0 0 3 8] ^nG^2\%. a.-- y=*iSf^T-&^*3tC 
:/7'1''<-M P7Hl';!^Sr#J0St), ^^^)\^7v^ 
g|«tlC<tO I SPJ;0 5'"n-A;H PT KU-X^^iiJOJi 
e>n'&, ISE-y— /N'GW 1 ti, Sg* StCDIPsecl^' 
>^;UjimT^fflt"-5i^a-A;U I P7 K UT-i^rtCD 

3 ^^E-y— >'N*ai«tfi 1 oi^gT^ijr-i^tca^fc* 
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GWi m\zifa-;W I P7 H l^T^^&miytz I P s e 
[0 0 3 91 AGWl «^rtGW2 t I P s e 

c h>^)V4 0(7)^iKpis*. I pu^)i^mm^-^^9 

tC^li-^fc-frS, I PU^Jl/^fiE-tJ— /-^QJi, ^rtOW 
2 ©KSE^&ff ^rtGW2 tSIElJ— i'tCWl t©W 
<D1 P S e c h>:^Jl'4 0 CDffiSZlPJSSritx^t-^. ?l3i 
pI©«-&tC«^rtGW2 t^M-y— AGWl t®Fa1-Ci/' 1 
p-;'^;H PTl^UT.^^mi'fzl Ps ec h>^;U4 

0 *?8i4;-r*. 

[0 0 4 0] 1 P s e c h>^-;U4 0«r?tSz:-r-5.t. ■T' 
-Jl/LTS*^!^!!-^--/"^]!^!^ 1 Ortw:/^^ '^-h I 
P7 h'k7.^#J0l6^. ^SEii— new 1 tt, NATtft 
5 »c J; 0 0©<fc 5 icSlSE-tJ— /"^iiffiffl 1 0 m<D-:/v'< 

^,liE-y— A*jl«ffl 1 Ol^T:i--i' tt*^. NAT««g 
5Tli I P s e cffiS!:S**St*#ttfc^^*«»'®>^ 

[0 0 4 1] NATtatg5 0NATX>hU«|gTeS 

[0 0 4 2] ^OPAigSEii— A*6«> ^>IiE-y— AGW 

1 tiiSlbT 1 P U-^^U^SEW^BiJtt^iifflAMIiEOgt. 

PT Kl^XSr^— tfffSi:bTDNSU— A7 ICliAO^ 

m.-ti>. ®AKEiJ-^''"«6tt{SA^IiESrjE«t-ffofcJl 
i:^|giE-9— A-GWl'sjiaU, K>tiE-tJ— AGW 1 ttN 
ATtSI#65TffifflT-5NATX> h 'Jlt^TeA^iEtli 
;i©J;^fCbT. tfOttfSllJ— A8 

[0 0 4 3] fflA^tiEiJ— A 6 ® AKIiESrff V^Ti^ 

AKE-tJ— A6*'>e>®a»ll'b:fc7!)Hi> MMVim (SSE 

e<J»C®AKffi1i— A6 fcWVi^t)-^. <iA^SE-y— A6 
d^-f-niCltN^-rS :i tTS®?^ 3 *3 J:Ot<iA^liE-y— A- 6 
T)i^UTK<liE«^®ffi558^«<lrff -5. <@A|giE-y--A 

6ttss*3 75^e©^ii4^sgPaii'^'&t>-e:icj;o. mm^M 

[0 0 4 41 4g* 3 35^ e>KIIii— A'Smffi 1 0 <Z)it?S 
L 1 P s e c h>^-JU4 0<&<sefflUTigiiE-y-— /N'GWl 
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h«, %7H^x««*3o^F*3®mia3 ooy^-f 
jiftffli 0f»go:/7'f'^— M P.7l*u:^;r*s. 

It— AGWltt, Bt^*y-fe;KtbTViSA'ir-, h?£rS 
^ LTffiJ 0 m L, . N A TtatE 5 W«S«S«C L/cdHi, 
567 H S:^* 3 ©^I'^jimffl 3 0 l^(D::^7-f b 
7 H U7.*^^:i:^-i^«tSliE-y— Ajimffl 1 0 P^OZfy 
^/^_|, I P7jt^X{Cf*lt#A*tT«/», ISStJ— AS 
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